Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
File:                     FivG9rrBQqA6uxp62RaQaD8DpNw.mft (raw, json)
Hash identifier:          TebbOggKl69oxYbDwaGUlqwrtQY91AMS+XLG47eUX+w=
Subject key identifier:   79:67:17:F8:CA:E7:33:39:13:E2:7F:B0:E3:7E:D5:76:30:BF:FF:DD
Authority key identifier: 16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC
Certificate issuer:       /CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
Certificate serial:       019D2703D87BCF03AC140EC0FEC84DB05A39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
Manifest number:          12B7
Signing time:             Wed 25 Mar 2026 22:00:56 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:56 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:56 +0000
Files and hashes:         1: FivG9rrBQqA6uxp62RaQaD8DpNw.crl (hash: PUTHd32r2SauX/YjDSA4b5PCLMmf2W3y8EK91Oy40xA=)
                          2: OdjD6-jie1gU1V0cRR0FziitCAg.roa (hash: MfGipVuvx0N4+V17kShStGKfSKXkomrNYWFKpDB6GCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:d8:7b:cf:03:ac:14:0e:c0:fe:c8:4d:b0:5a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
        Validity
            Not Before: Mar 25 22:00:56 2026 GMT
            Not After : Mar 26 22:00:56 2026 GMT
        Subject: CN=796717f8cae7333913e27fb0e37ed57630bfffdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:58:7f:49:a3:86:21:af:6c:8b:bb:bd:a1:
                    9e:4c:28:da:a1:98:b1:9b:7e:52:7a:38:ef:42:92:
                    ed:be:a6:5c:99:48:69:db:9a:74:b5:2b:85:9d:e2:
                    7f:9e:a9:be:08:38:46:9d:53:f9:6e:1b:3a:ac:16:
                    e9:a7:a8:bf:9e:f4:d0:0b:e7:bc:57:54:2d:ac:55:
                    40:b4:b3:3e:56:91:63:3f:86:09:60:dc:c3:f9:ea:
                    3d:e6:6b:65:6c:bf:de:9d:1f:c0:62:05:33:1f:00:
                    2c:b9:34:1d:39:cc:8f:61:5a:be:04:4d:03:7a:bc:
                    fb:25:d2:9c:ed:87:42:53:0c:4e:75:2c:93:f0:50:
                    e3:11:a4:0e:bb:a8:04:6a:8b:48:0e:f2:68:d0:a5:
                    ef:6b:3a:0c:7d:dc:e9:12:03:7b:41:9a:d3:37:23:
                    92:9d:53:3d:dd:d3:b8:7c:85:a0:29:ca:74:7b:64:
                    94:b1:29:5d:2e:02:15:43:fc:5d:91:8a:50:0b:44:
                    66:59:2f:42:db:6a:fa:72:b4:a0:00:b1:da:3d:a4:
                    3b:fc:e5:20:43:a2:67:48:ef:7c:e4:cc:03:0e:41:
                    36:84:76:47:cc:a5:06:90:fc:bf:55:67:28:ad:12:
                    00:4d:2f:9e:cc:04:6b:8d:92:7f:bd:27:d8:23:73:
                    40:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:67:17:F8:CA:E7:33:39:13:E2:7F:B0:E3:7E:D5:76:30:BF:FF:DD
            X509v3 Authority Key Identifier:
                keyid:16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:7a:ff:fe:a4:01:a5:96:ba:4b:ec:a3:5a:4a:e7:74:5a:fb:
         85:74:da:28:b0:23:58:45:27:90:49:31:56:a4:e3:2e:c5:0c:
         33:21:27:d8:d4:14:7d:e4:8f:38:da:92:a8:bc:47:d8:89:4e:
         bb:78:ee:94:41:16:cc:08:4c:bd:39:f0:1c:8b:7a:62:30:be:
         1d:c4:0e:23:9c:a7:69:e5:49:e7:2e:51:8c:cb:f9:0b:a9:62:
         6f:3e:70:6e:31:cd:b7:6d:f7:b6:58:30:5d:13:14:13:42:0d:
         8e:43:a3:28:27:3b:41:22:a0:48:d5:06:2a:4a:05:37:af:54:
         94:53:b3:c9:2a:3f:df:07:6a:79:ae:4e:ff:0c:66:41:3f:a5:
         96:82:14:7b:0c:9d:aa:1a:cd:fa:c7:bd:88:46:74:19:d8:9c:
         72:83:93:06:ec:9c:af:cc:8b:0d:ce:5c:b6:d9:76:a7:02:9a:
         17:d2:9a:80:ed:60:a1:57:96:54:fc:43:e7:55:56:a5:7e:95:
         75:6d:4c:18:f4:6a:50:2c:33:f9:be:6d:2b:ea:ac:58:a5:c4:
         a3:30:12:98:06:c1:2a:9d:74:e5:3e:d0:ce:c9:89:11:db:7b:
         7b:4a:f2:25:62:69:bf:09:cf:14:6b:64:ee:06:d8:89:89:90:
         ce:e6:31:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:06 2026 by rpki-client